Restrict ability to change own password

I have just commit this change

ah - maybe I'm wrong - but I am using version 6.x-1.2 - and this bug is NOT fixed there. the .module file does NOT contain this code.
is this a regression? Was it forgotten to merge?
Or am I wrong somehow?

Christian

hmm, I don't know what happened, I will have to look into it

Here is a slight modification of @droetker's code and the latest 1.4 code. For your review and inclusion:
I changed it so that by default you *can* change passwords and you have to explicitly set the *inability* to change them.

<?php
// $Id: restrict_password_change.module,v 1.4 2009/08/23 03:51:31 jrglasgow Exp $
// by James Glasgow - Tribute Media - http://www.tributemedia.com

/**
 * Implementation of hook_perm()
 */
function restrict_password_change_perm() {
  return array(
    'cant change other users password',
    'cant change other users username',
    'cant change other users email',
    'cant delete other users',
    'cant block other users',

    'cant change own password',
    'cant change own username',
    'cant change own email',
    'cant delete own user',
    'cant block own user'

  );
}

/**
 * Implementation of hook_form_alter()
 */
function restrict_password_change_form_alter(&$form, $form_state, $form_id) {
  global $user;
  switch ($form_id) {
    case 'user_profile_form':

      /* Admin user so break out */
      if($user->uid == 1) { break; }
	  
	  if($user->uid != $form['_account']['#value']->uid) {
        if(user_access('cant change other users password')) { /*password cannot be changed*/ $form['account']['pass']['#access'] = FALSE; }
        if(user_access('cant change other users username')) { /* username cannot be changed*/ $form['account']['name']['#access'] = FALSE; }
        if(user_access('cant block other users')) { /* user cannot be blocked*/ $form['account']['status']['#access'] = FALSE; }
        if(user_access('cant change other users email')) { /* e-mail address cannot be changed*/ $form['account']['mail']['#access'] = FALSE; }
        if(user_access('cant delete other users')) { /* user cannot be deleted*/ $form['delete']['#access'] = FALSE; }
      }

      if($user->uid == $form['_account']['#value']->uid) {
        if(user_access('cant change own password')) { /*password cannot be changed*/ $form['account']['pass']['#access'] = FALSE; }
        if(user_access('cant change own username')) { /* username cannot be changed*/ $form['account']['name']['#access'] = FALSE; }
        if(user_access('cant block own user')) { /* user cannot be blocked*/ $form['account']['status']['#access'] = FALSE; }
        if(user_access('cant change own email')) { /* e-mail address cannot be changed*/ $form['account']['mail']['#access'] = FALSE; }
        if(user_access('cant delete own user')) { /* user cannot be deleted*/ $form['delete']['#access'] = FALSE; }
      }


      /* check to see if the form is for the current user or if they have permission
       check if user 1 - if not, prevent changing user 1 account
       regardless of permission to 'change other users password'*/ 
      if(($user->uid != 1) && ($form['_account']['#value']->uid == 1)) {
		// protect admin usr 1
		$form['account']['#access'] = FALSE;
		$form['theme_select']['#access'] = FALSE;
		$form['contact']['#access'] = FALSE;
		$form['submit']['#access'] = FALSE;
		$form['timezone']['#access'] = FALSE;
		$form['messaging']['#access'] = FALSE;
		$form['delete']['#access'] = FALSE;
      } 
      break;
  }
}

Are you using this module? Can you provide more information?

Check your permissions page first — also make sure you are logged in as the admin user (uid 1).

If that's not it, I would also clear the caches (admin/settings/performance), then disable all of the contrib modules you have installed, and and re-enable the modules one by one to find out if one of your currently installed modules has removed the password fields on you.